DNSSEC Analyzer

Domain Name:

Time: 2020-05-29 05:03:45 UTC, NTP stratum 4

Analyzing DNSSEC problems for PKI.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (864 bytes) ;; HEADER SECTION ;; id = 44059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200611000000 20200521000000 20326 . KfazTUJ4/ezskruozpqOV/AKBcdoMVTxmLSjKaiZuNW6QVAY60/khxOa0g7EqH/yBZP9pKIIMrxW tRzfl2YzZhkRfkDJKsNFDpyRtq06Hhhf8KHgFNsmmdUBKVtC7jh/5pldrMpInmtrV6344PkDS499 x0qfsziD/FQCwF/X8SWvfqKYmhvE8RjnlsycLtd1vao8iZtTDrevxPZCTRNwDfOufW5jNmDP0nRK g/U0rXVXxf5q9jVX3Q875Kzyp1eewI2fPBmBXX5Vcpb3We0GtcecKR0G0nsdXd898GiFlZU2Iwrn emLWnCfE6LaoOcKcYzNO8dfMbI1hQzyIWtnb6Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200611000000 20200521000000 20326 . KfazTUJ4/ezskruozpqOV/AKBcdoMVTxmLSjKaiZuNW6QVAY60/khxOa0g7EqH/yBZP9pKIIMrxW tRzfl2YzZhkRfkDJKsNFDpyRtq06Hhhf8KHgFNsmmdUBKVtC7jh/5pldrMpInmtrV6344PkDS499 x0qfsziD/FQCwF/X8SWvfqKYmhvE8RjnlsycLtd1vao8iZtTDrevxPZCTRNwDfOufW5jNmDP0nRK g/U0rXVXxf5q9jVX3Q875Kzyp1eewI2fPBmBXX5Vcpb3We0GtcecKR0G0nsdXd898GiFlZU2Iwrn emLWnCfE6LaoOcKcYzNO8dfMbI1hQzyIWtnb6Q== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=48903 is now in the chain-of-trust
	Query to g.root-servers.net for PKI.GOV/A
	Timeout querying g.root-servers.net/192.112.36.4 for PKI.GOV/A
	All Queries to g.root-servers.net for PKI.GOV/A timed out or failed
	Query to k.root-servers.net for PKI.GOV/A
	Received 662 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (662 bytes) ;; HEADER SECTION ;; id = 7947 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to c.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (661 bytes) ;; HEADER SECTION ;; id = 50457 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to j.root-servers.net for GOV/DS
	Received 403 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (403 bytes) ;; HEADER SECTION ;; id = 56020 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20200610210000 20200528200000 48903 . tAz1SmgWSehvgHSQcmOZ4A8WF9imkk7blqfaN5DSjki/5ryzxFQnZ8H5NF5l1UmapVmVxaT/Oq0F PjgDAhfg/N7wiAB7lEMi+ESXsIt4lreH9UGoh07S/tO4XtiJ76HrqaR8yKRCo0zwNw+JA6Kkj79T EF/ymfbyoPIxGTUDzmXrO2Ph6Pz49rfoeEX0BoQMc4Q6o/otXSVSOQNwJqAUIGB5xeDBOJ14P9O3 p4E6bwbUpUftrn4FHuBEspz+Se9S3xmeT5hT1sl8lNuF4w2EDcbZ0OVDNDImH9AVnfgQbP/CJ31w /2781DUJt9PysOlUgKt+unrKGm3ru8/f44yg2A== )`
	RRSIG=48903 and DNSKEY=48903 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (777 bytes) ;; HEADER SECTION ;; id = 13540 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaRBt9ApLI72LFfiXVo0ye5nyqvBZ60rp7FMVEohCYuM3WOBFxty2pkgIj7K3AEw6sHOJ6Kb J6yut0qXTxEIYu1jHm/Lg+VLrDLXLzw3I1BA+mAymmfR4mkyjT/umY/0PqXETGCmTOVFx4guyhDe EVr65wIGFXpRfMqJiCSXJKmhSFvAqw1vlBRAUYDG4G9tGhUJaJdflAKWvf9Rp5TicwU= ) ; Key ID = 40176 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200603190254 20200519185754 7698 gov. mWtjhi3cxvYYOBSsVsXSVuw2zLJw0V/q/miinZ627+QQ2gF9XLwS4K0o7vDZ2DQH9QEAYQwuWWxK O8H5pZnfpb4AAsy7lEAySinNyyvr2x7+8/XL/HatK9ofm9crLnDZtqtPCvXzNUxjA+roDsJjXw8U 4E+8l971CsWhQT5Je7BejjjyPafYgaBRNPWdw2SZhWaEDN5+NhrBFFgreuEm4dAbEB2WTVZ6qTKW 1d1QWjbWbQzf7sSbwmsx64BKHRNq08XOFkno+cstr+FrvAL5pv6EDhJuwG0Kg4f+t+633AMnY3Ax iYzhl7bI01uBsPbdoym87HOwh8yknM2s23Pj5A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaRBt9ApLI72LFfiXVo0ye5nyqvBZ60rp7FMVEohCYuM3WOBFxty2pkgIj7K3AEw6sHOJ6Kb J6yut0qXTxEIYu1jHm/Lg+VLrDLXLzw3I1BA+mAymmfR4mkyjT/umY/0PqXETGCmTOVFx4guyhDe EVr65wIGFXpRfMqJiCSXJKmhSFvAqw1vlBRAUYDG4G9tGhUJaJdflAKWvf9Rp5TicwU= ) ; Key ID = 40176`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200603190254 20200519185754 7698 gov. mWtjhi3cxvYYOBSsVsXSVuw2zLJw0V/q/miinZ627+QQ2gF9XLwS4K0o7vDZ2DQH9QEAYQwuWWxK O8H5pZnfpb4AAsy7lEAySinNyyvr2x7+8/XL/HatK9ofm9crLnDZtqtPCvXzNUxjA+roDsJjXw8U 4E+8l971CsWhQT5Je7BejjjyPafYgaBRNPWdw2SZhWaEDN5+NhrBFFgreuEm4dAbEB2WTVZ6qTKW 1d1QWjbWbQzf7sSbwmsx64BKHRNq08XOFkno+cstr+FrvAL5pv6EDhJuwG0Kg4f+t+633AMnY3Ax iYzhl7bI01uBsPbdoym87HOwh8yknM2s23Pj5A== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=40176 is now in the chain-of-trust
	Query to c.gov-servers.net for PKI.GOV/A
	Received 525 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (525 bytes) ;; HEADER SECTION ;; id = 2769 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI.GOV. 86400 IN NS dns2.PKI.GOV. PKI.GOV. 86400 IN NS dns1.PKI.GOV. PKI.GOV. 3600 IN DS ( 5095 8 2 aee045aa436ad2ec362ad5ce91610088a8596bda6accdfe75fc2d209b2922d68 ) PKI.GOV. 3600 IN DS ( 51760 8 2 1d60034aa78950d5317ab0df85a73e5f8c1de627ea73462e9a712d14b5593dcd ) PKI.GOV. 3600 IN DS 5095 8 1 0d4454d6b0f15db200f974d46fd0a2310420e04b PKI.GOV. 3600 IN DS 51760 8 1 04d49ff49cfdbaf35c8dffae3234c9a83879c258 PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. k8Gzzg1nGvczPTEpV+RnH9eJK+0M7WIXFrFVtG4Qq5LcxoZ5XYVvYb/za4cZ5HV1ygL9uoKKWtMD ztH84uCJZwo9cN6dNRSM2dCphq/7E9KH5piWxbDuytsWr8iPl2C1Jv+B8cioBSDYoQnnX0LNy6re Dim7zIb5PyrQPmdwXBp0ocIcqx0TUV9XrkEATZmFj+jJdLviO46Mz7tdALxnDg== ) ;; ADDITIONAL SECTION (5 records) dns2.PKI.GOV. 86400 IN A 199.167.93.100 dns2.PKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns1.PKI.GOV. 86400 IN A 199.167.92.100 dns1.PKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for PKI.GOV/DNSKEY
	Received 525 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (525 bytes) ;; HEADER SECTION ;; id = 33282 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) PKI.GOV. 86400 IN NS dns2.PKI.GOV. PKI.GOV. 86400 IN NS dns1.PKI.GOV. PKI.GOV. 3600 IN DS ( 5095 8 2 aee045aa436ad2ec362ad5ce91610088a8596bda6accdfe75fc2d209b2922d68 ) PKI.GOV. 3600 IN DS ( 51760 8 2 1d60034aa78950d5317ab0df85a73e5f8c1de627ea73462e9a712d14b5593dcd ) PKI.GOV. 3600 IN DS 5095 8 1 0d4454d6b0f15db200f974d46fd0a2310420e04b PKI.GOV. 3600 IN DS 51760 8 1 04d49ff49cfdbaf35c8dffae3234c9a83879c258 PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. k8Gzzg1nGvczPTEpV+RnH9eJK+0M7WIXFrFVtG4Qq5LcxoZ5XYVvYb/za4cZ5HV1ygL9uoKKWtMD ztH84uCJZwo9cN6dNRSM2dCphq/7E9KH5piWxbDuytsWr8iPl2C1Jv+B8cioBSDYoQnnX0LNy6re Dim7zIb5PyrQPmdwXBp0ocIcqx0TUV9XrkEATZmFj+jJdLviO46Mz7tdALxnDg== ) ;; ADDITIONAL SECTION (5 records) dns2.PKI.GOV. 86400 IN A 199.167.93.100 dns2.PKI.GOV. 86400 IN AAAA 2620:9b:c001:9300:22::30 dns1.PKI.GOV. 86400 IN A 199.167.92.100 dns1.PKI.GOV. 86400 IN AAAA 2620:9b:c000:9200:12::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone PKI.GOV

PKI.GOV

	Checking DS between GOV and PKI.GOV
	Query to a.gov-servers.net for PKI.GOV/DS
	Received 399 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (399 bytes) ;; HEADER SECTION ;; id = 24524 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DS ;; ANSWER SECTION (5 records) PKI.GOV. 3600 IN DS ( 5095 8 2 aee045aa436ad2ec362ad5ce91610088a8596bda6accdfe75fc2d209b2922d68 ) PKI.GOV. 3600 IN DS ( 51760 8 2 1d60034aa78950d5317ab0df85a73e5f8c1de627ea73462e9a712d14b5593dcd ) PKI.GOV. 3600 IN DS 5095 8 1 0d4454d6b0f15db200f974d46fd0a2310420e04b PKI.GOV. 3600 IN DS 51760 8 1 04d49ff49cfdbaf35c8dffae3234c9a83879c258 PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. k8Gzzg1nGvczPTEpV+RnH9eJK+0M7WIXFrFVtG4Qq5LcxoZ5XYVvYb/za4cZ5HV1ygL9uoKKWtMD ztH84uCJZwo9cN6dNRSM2dCphq/7E9KH5piWxbDuytsWr8iPl2C1Jv+B8cioBSDYoQnnX0LNy6re Dim7zIb5PyrQPmdwXBp0ocIcqx0TUV9XrkEATZmFj+jJdLviO46Mz7tdALxnDg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DS records for PKI.GOV in the GOV zone
	DS=5095/SHA-256 has algorithm RSASHA256
	DS=51760/SHA-256 has algorithm RSASHA256
	DS=5095/SHA-1 has algorithm RSASHA256
	DS=51760/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`PKI.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200604221007 20200528221007 40176 gov. k8Gzzg1nGvczPTEpV+RnH9eJK+0M7WIXFrFVtG4Qq5LcxoZ5XYVvYb/za4cZ5HV1ygL9uoKKWtMD ztH84uCJZwo9cN6dNRSM2dCphq/7E9KH5piWxbDuytsWr8iPl2C1Jv+B8cioBSDYoQnnX0LNy6re Dim7zIb5PyrQPmdwXBp0ocIcqx0TUV9XrkEATZmFj+jJdLviO46Mz7tdALxnDg== )`
	RRSIG=40176 and DNSKEY=40176 verifies the DS RRset
	DS=5095/SHA-256 is now in the chain-of-trust
	DS=51760/SHA-256 is now in the chain-of-trust
	`PKI.GOV. 3600 IN DS ( 5095 8 2 aee045aa436ad2ec362ad5ce91610088a8596bda6accdfe75fc2d209b2922d68 )`
	`PKI.GOV. 3600 IN DS ( 51760 8 2 1d60034aa78950d5317ab0df85a73e5f8c1de627ea73462e9a712d14b5593dcd )`
	`PKI.GOV. 3600 IN DS 5095 8 1 0d4454d6b0f15db200f974d46fd0a2310420e04b`
	`PKI.GOV. 3600 IN DS 51760 8 1 04d49ff49cfdbaf35c8dffae3234c9a83879c258`
	Query to dns2.PKI.GOV for PKI.GOV/DNSKEY
	Received 2320 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (2320 bytes) ;; HEADER SECTION ;; id = 60792 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZQe0oQ5mvIHD2SOM9BvKGGQSSnLfVb0UEIMPSQDK/y28kbMHNyq0UkhilE1mUBfrEbavvwZ Jj0xjbxKgUQC0DSrW+rPBHRFzXsO6ygBCERr/cuQp6VtyrFi0htJUe5IqVxNCxVG+/394OHlEKXI zwLTwsFuDZLVoOpH5oZE2ufZJwRrozFYxDUbPsvpGxIdINu7yw7+eE2XG9ntuoDMBL7YCHX8+nfc /whLLp0vwtIpFM1dCU8BPlmV9hEBsOYYtQPl6tvs9qgnlvIyeChuOqJiow5gKG4L4+vtEzK/nwu3 mpU3M1CuOvOUsar1bxsXBrdFETfTHKxiSLXyiK1gS4k= ) ; Key ID = 45738 PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAc/tigKoQPbUXoQ3+ZorQzGdawJxqnvB7sfzJJ+7d9VOVLYBn8/5Y7lHRf7dWbyJZmXjXuV+ RxfrMWPOjbJOdb7H4a7P+4jjG0RCtyohSbG+fXWtJbw9aTpS02yKQFv+BYQY9mc3dgm/yRNWmVB4 Lt25ZQ64brEi3ChhCkYxUAJ2yKkkYM0UjNw9kXI43A2RoftPoNfeIWe+CmnlWfeaL49F0xpJZ2pR EepC7tLaQpGwCE+z9eeYlNsIOhtHLfxVWneqip4BE3IQ1zz9c1uGKXmvPLgXzEg6Hoo9J9Iy8kyn RaP71BeYm+h79UsjGCekhrhAcQqxaRx3iqygnDvGDO0= ) ; Key ID = 44358 PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZoZR6S/yNTC2ICQrtXiBpZZLs75Kw8+ZeOGsVOe/Owf2vrOxLCBP4buhRVVTQhLMNwX2BDN kO8AF1t4GCM1ugTVSKOo8WltaN74q1ifUc0V1qd9sqAaALysiN9NnwHVDhnyyUJC7P+cC0FivALC oAs8unCdozOLCl6C3GkbxGjAgg7JAaWZYRVdaEwpxAB9NY3HJ8BFLrhZBC2Nr+YB0FDaHjkGaqBv zXi/1noZmk/RTMqOltwfqbE+49mwD4EdVMMm9AVm+X0CoysbbRhDfn3Lmo6LfY6L7Y1pql5MRP5U vect2eRV407Whtv+t+fPbmOef/w8GThBAg9OAizm2Z8= ) ; Key ID = 5095 PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbRwU8TwMWQENtbAvGhcRyg1THNZakSultgNukBQqrKfeGSEJHZJFl3QwwmmkLyPAKeNnebc VcGgslclBHTkTSho+3mc0PTLH4JCTciGUjo5TOum1OVhAnZvmaQvVIq8BX9xGCGi9dy89uFntoDL ranzmjQylrtcUjs8rCeOpTVlSJIHsJrJbeiVUC1PZLMpDF0wdQ9BmoMCeHv5HHRolvYeffVwB2cq ZGZ7Rw/AS3nxbzngUT4Qj+BA1s28VjPuEzcwPomi2Pps3o28donuPA2EBPJopJlTmvXga69+Yue6 pcERjKAPrcIuUV3dJG7X0y0BnVsYermj5IKh8ve2QQk= ) ; Key ID = 51760 PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200601110756 20200525110756 45738 pki.gov. CzDaKVMZSQBzMMYH9tbigkuyEQYYFSaws/Z0sSmYtSOgNBFOg4VTLf+FUAzmIzLBUc/CKYL9mcbv YiMN+hAXX9LpIC4kmr90QkiLGU/M6PUd8oYI/QJkzv/WnO0eNKxiGM4sxXZ2mW5q5hdEmnTeD6qV Pklf3oWaRIY+ibJxyTE/3JtuFFClO8j7sCGl4skWFlbF7HW/1LQXcdHHoP6lNDZS2clBpLYgSVlJ 2HqgSD33l+TT8PibrWsOaDYBgNbjU04pusfzQq2rk5+QEM4RtagAkUUAoN9kTalm75niZ6HMoVku mEq65A1O0SanNvIsNhPAlFl0HgOzS80qGCXxzw== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200601110756 20200525110756 44358 pki.gov. sBlAYat5paJFaM7KYfoK0IScG/Hx1CqlO+wVxYHlx9SIxuXRF4K63am+oSDo0UzY5/KqceWzc99A kv8OPmdDzCjK82y9HlLC0Qywx1VezG+m7dPJl3SRBLR3gxtpK0y72XEGPT0ALdFVRK+2PyOGdqjp HX1pRgelQUO+CmOEr8Y/9g/Ukt6Tf99yk925wXlkkgsmi7NvFxJfqdushsoMbJNwFEjcY79tMy5b dTevSXzzDSBJcMt7KIfiq3B0PILKMjBBJW1VxW56m6R9R3jvN4b/n0dY1ZIDhbRNgme13wFOfd7s vEoV8IU3vXhZ14b6in+or2TtFaRtqgWpKqopUg== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200601110756 20200525110756 5095 pki.gov. T9PzQx2lq+UdccAl8n1bN5EPgFhPmTvGqYlSLabspGY0HqMY14CXz5hIvZxXw0WDa8ubiJCsx8do lNt/lGn+uwuQSrYzbzsqNzdO52isSUb1YJMP/nawg3tKVlqNeL/GJ78R560hT0ZG1XYKUidpg+Hp or+WFr9/cYHfjsvgo0zN800G5OROSSETwZnLGBw6gDxEIhm+4HzlZR32iqskIlnI2qZ9sVVXyVYx cu63SEZxEZ3sqvfHIDArCCV4tj/PIl8PjEGSt/JDzG1hRUTeeYRY/JYbxFDD1jYdQ7gfsGHxllM2 hvVSxKGTlFv7BYuzhiY/7W+8nM8nwdePYCBP5Q== ) PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200601110756 20200525110756 51760 pki.gov. a16kiDxuvoDtJXY5hI5WRXCpEGDIe28AYx3+6ILHcJPStJ+2C4wIwsG2ErlfnjoSE/VFxDV4T3cm s1//T078x9jM5UjWjINMQ5I3MLnuLqsOoA5HRawiwNx4HGB5OGfmrw9EJjF1GMWf7fXgLVSn6pko +/ME25VYqbsyDLbnNzca4fGx2VOPryd1wNVVO+IR7StSVluH7WetmpFau5TOm5HiLxbqAMuKkOqy FtoiPBcybjK7DLeoKEllP1QJudSnGW8XoQecMGMKSjP54TIs9yhG4zni7jU46ismgvi7vIIqk6PN pCUnhMZmYhakX1bUw7ojvN8tbNkU+ee5FquqSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for PKI.GOV
	`PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAZQe0oQ5mvIHD2SOM9BvKGGQSSnLfVb0UEIMPSQDK/y28kbMHNyq0UkhilE1mUBfrEbavvwZ Jj0xjbxKgUQC0DSrW+rPBHRFzXsO6ygBCERr/cuQp6VtyrFi0htJUe5IqVxNCxVG+/394OHlEKXI zwLTwsFuDZLVoOpH5oZE2ufZJwRrozFYxDUbPsvpGxIdINu7yw7+eE2XG9ntuoDMBL7YCHX8+nfc /whLLp0vwtIpFM1dCU8BPlmV9hEBsOYYtQPl6tvs9qgnlvIyeChuOqJiow5gKG4L4+vtEzK/nwu3 mpU3M1CuOvOUsar1bxsXBrdFETfTHKxiSLXyiK1gS4k= ) ; Key ID = 45738`
	`PKI.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAc/tigKoQPbUXoQ3+ZorQzGdawJxqnvB7sfzJJ+7d9VOVLYBn8/5Y7lHRf7dWbyJZmXjXuV+ RxfrMWPOjbJOdb7H4a7P+4jjG0RCtyohSbG+fXWtJbw9aTpS02yKQFv+BYQY9mc3dgm/yRNWmVB4 Lt25ZQ64brEi3ChhCkYxUAJ2yKkkYM0UjNw9kXI43A2RoftPoNfeIWe+CmnlWfeaL49F0xpJZ2pR EepC7tLaQpGwCE+z9eeYlNsIOhtHLfxVWneqip4BE3IQ1zz9c1uGKXmvPLgXzEg6Hoo9J9Iy8kyn RaP71BeYm+h79UsjGCekhrhAcQqxaRx3iqygnDvGDO0= ) ; Key ID = 44358`
	`PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAZoZR6S/yNTC2ICQrtXiBpZZLs75Kw8+ZeOGsVOe/Owf2vrOxLCBP4buhRVVTQhLMNwX2BDN kO8AF1t4GCM1ugTVSKOo8WltaN74q1ifUc0V1qd9sqAaALysiN9NnwHVDhnyyUJC7P+cC0FivALC oAs8unCdozOLCl6C3GkbxGjAgg7JAaWZYRVdaEwpxAB9NY3HJ8BFLrhZBC2Nr+YB0FDaHjkGaqBv zXi/1noZmk/RTMqOltwfqbE+49mwD4EdVMMm9AVm+X0CoysbbRhDfn3Lmo6LfY6L7Y1pql5MRP5U vect2eRV407Whtv+t+fPbmOef/w8GThBAg9OAizm2Z8= ) ; Key ID = 5095`
	`PKI.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbRwU8TwMWQENtbAvGhcRyg1THNZakSultgNukBQqrKfeGSEJHZJFl3QwwmmkLyPAKeNnebc VcGgslclBHTkTSho+3mc0PTLH4JCTciGUjo5TOum1OVhAnZvmaQvVIq8BX9xGCGi9dy89uFntoDL ranzmjQylrtcUjs8rCeOpTVlSJIHsJrJbeiVUC1PZLMpDF0wdQ9BmoMCeHv5HHRolvYeffVwB2cq ZGZ7Rw/AS3nxbzngUT4Qj+BA1s28VjPuEzcwPomi2Pps3o28donuPA2EBPJopJlTmvXga69+Yue6 pcERjKAPrcIuUV3dJG7X0y0BnVsYermj5IKh8ve2QQk= ) ; Key ID = 51760`
	DNSKEY=5095/SEP is now in the chain-of-trust
	DS=5095/SHA-256 verifies DNSKEY=5095/SEP
	DS=5095/SHA-1 verifies DNSKEY=5095/SEP
	DNSKEY=51760/SEP is now in the chain-of-trust
	DS=51760/SHA-256 verifies DNSKEY=51760/SEP
	DS=51760/SHA-1 verifies DNSKEY=51760/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200601110756 20200525110756 45738 pki.gov. CzDaKVMZSQBzMMYH9tbigkuyEQYYFSaws/Z0sSmYtSOgNBFOg4VTLf+FUAzmIzLBUc/CKYL9mcbv YiMN+hAXX9LpIC4kmr90QkiLGU/M6PUd8oYI/QJkzv/WnO0eNKxiGM4sxXZ2mW5q5hdEmnTeD6qV Pklf3oWaRIY+ibJxyTE/3JtuFFClO8j7sCGl4skWFlbF7HW/1LQXcdHHoP6lNDZS2clBpLYgSVlJ 2HqgSD33l+TT8PibrWsOaDYBgNbjU04pusfzQq2rk5+QEM4RtagAkUUAoN9kTalm75niZ6HMoVku mEq65A1O0SanNvIsNhPAlFl0HgOzS80qGCXxzw== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200601110756 20200525110756 44358 pki.gov. sBlAYat5paJFaM7KYfoK0IScG/Hx1CqlO+wVxYHlx9SIxuXRF4K63am+oSDo0UzY5/KqceWzc99A kv8OPmdDzCjK82y9HlLC0Qywx1VezG+m7dPJl3SRBLR3gxtpK0y72XEGPT0ALdFVRK+2PyOGdqjp HX1pRgelQUO+CmOEr8Y/9g/Ukt6Tf99yk925wXlkkgsmi7NvFxJfqdushsoMbJNwFEjcY79tMy5b dTevSXzzDSBJcMt7KIfiq3B0PILKMjBBJW1VxW56m6R9R3jvN4b/n0dY1ZIDhbRNgme13wFOfd7s vEoV8IU3vXhZ14b6in+or2TtFaRtqgWpKqopUg== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200601110756 20200525110756 5095 pki.gov. T9PzQx2lq+UdccAl8n1bN5EPgFhPmTvGqYlSLabspGY0HqMY14CXz5hIvZxXw0WDa8ubiJCsx8do lNt/lGn+uwuQSrYzbzsqNzdO52isSUb1YJMP/nawg3tKVlqNeL/GJ78R560hT0ZG1XYKUidpg+Hp or+WFr9/cYHfjsvgo0zN800G5OROSSETwZnLGBw6gDxEIhm+4HzlZR32iqskIlnI2qZ9sVVXyVYx cu63SEZxEZ3sqvfHIDArCCV4tj/PIl8PjEGSt/JDzG1hRUTeeYRY/JYbxFDD1jYdQ7gfsGHxllM2 hvVSxKGTlFv7BYuzhiY/7W+8nM8nwdePYCBP5Q== )`
	`PKI.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200601110756 20200525110756 51760 pki.gov. a16kiDxuvoDtJXY5hI5WRXCpEGDIe28AYx3+6ILHcJPStJ+2C4wIwsG2ErlfnjoSE/VFxDV4T3cm s1//T078x9jM5UjWjINMQ5I3MLnuLqsOoA5HRawiwNx4HGB5OGfmrw9EJjF1GMWf7fXgLVSn6pko +/ME25VYqbsyDLbnNzca4fGx2VOPryd1wNVVO+IR7StSVluH7WetmpFau5TOm5HiLxbqAMuKkOqy FtoiPBcybjK7DLeoKEllP1QJudSnGW8XoQecMGMKSjP54TIs9yhG4zni7jU46ismgvi7vIIqk6PN pCUnhMZmYhakX1bUw7ojvN8tbNkU+ee5FquqSw== )`
	RRSIG=45738 and DNSKEY=45738 verifies the DNSKEY RRset
	RRSIG=44358 and DNSKEY=44358 verifies the DNSKEY RRset
	RRSIG=5095 and DNSKEY=5095/SEP verifies the DNSKEY RRset
	RRSIG=51760 and DNSKEY=51760/SEP verifies the DNSKEY RRset
	DNSKEY=45738 is now in the chain-of-trust
	DNSKEY=44358 is now in the chain-of-trust
	Query to dns1.PKI.GOV for PKI.GOV/A
	Timeout querying dns1.PKI.GOV/199.167.92.100 for PKI.GOV/A
	All Queries to dns1.PKI.GOV for PKI.GOV/A timed out or failed
	Query to dns2.PKI.GOV for PKI.GOV/A
	Received 1356 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1356 bytes) ;; HEADER SECTION ;; id = 51240 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20200605031119 20200529031119 45738 pki.gov. X5zEW1Xbt31aKd5iVHB94q5SovaQVcFA6x38FU2p3Uh+UncWA3Jje7f+7DmEb6pJFmV1XCUOAzNB wlZ2TVtDlEf+g2m0VADjckp5wiQJGFkcGp1xMHHT1QxrAyXp6k0hgJxapOmWRYLL94b82svpVP5f nP3JI8kIaffwo9FqfBoBpica01cOSCmp+RchYyW1ysYvWVysFntJ/LdTDxwogj4ogEj1oXL9E+v3 0lbpVmCbjrw0D8xg5hLThA+NZ4qxqn2//l+4h+0ZzS37dOnwQVUJfFVVGjnnd5fLyiObiU8DaMHG 9pIoYzqoMk44sjuGcUNqLfbgm6vfuLBwh7285g== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20200601092454 20200525092454 44358 pki.gov. mQGQB2M9jGy04O+Vqi80VphDqP8RVIqcy/HueTT6vR2uOvZwg9BNTw5ZNFu9tMWPcaDYi0xDFJlQ alVM/FlRYg8A+5n2GTDtXKvyVAC31DwzyMI0thNdgDEqdVM7nrr1WscS2pbCTJZR1snvHFh9sGvs aeERAfgStdZMbiJX0KrIAiTfFiNjDxwBdrvXhm+SLGomEKmA4hy0u9Fi9YWN75Ofod/zuidgvJTG 19VT+1nZoy7c6jc0b5FIM5NEv0SemZJjx90c8f11HMuIqRYPBcb40x2uekgY93UV6xZQiW2d6y2o eM9ed4D+b1Ci6hJFLeIwt+CWaJp5F8NMt+0n9A== ) placpjqesja846de31v0ckkqc5pfkjae.PKI.GOV. 86400 IN NSEC3 ( 1 0 1 1fa40d90904527a2 placpjqesja846de31v0ckkqc5pfkjaf NS SOA RRSIG DNSKEY NSEC3PARAM ) placpjqesja846de31v0ckkqc5pfkjae.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20200605033838 20200529033838 45738 pki.gov. IsEGz7N9YlaLHkbSxLZ7agZ59sArc94qzQbfYc0Sbl2BcnSCnBHtMU+MJlvgPKU3mpCXD7yBTrkC kZquvu2Iogwx/yiLXsOmmiqbMKWSlTfPQZW2XRr4l1oMCo3eJ3XBemItQh1UkVu+rQDzJ/BWt3qr wu6664OBZPxUnyxDBE1O0NNJ7Yyzvv4otAGOxSRQTE/vY96je9DeSQSL0V6m/yhH6ORSgKNo4nUY qTwR27OJSysQ7lPCAvXI7Xm9FL/mojn7JL5IgU8DO1eve7/Igm1EkXb58oChwthlUxwCG0i7BuOA qHu610a7xoTBXvVa1zmHo2eoB8pQiHqgvS0RBA== ) placpjqesja846de31v0ckkqc5pfkjae.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20200601092454 20200525092454 44358 pki.gov. AFO0Mf7LcUJiq/5UIJ4Sa2CEYL9Ug6ugda0IrF4f7VqVe8g+Wd1nni/Nk4ZP08zTcUOuRrmT8hKP W4B4ul+F0zNemrcfmLnVXy/uUSl6QAvbshMuabj/aTPxzifB+eIdj60wXbxGSpZKAa7QvX7GMkLz M/ZPPEcWMkN2T93R/pNgA2cyK+569PZkTBImM7Ur7k1o+MkLsjysIv3mpnBdayAlVv4N/RpK/O+u 61zx5GPGHfAzC3OxvewCadZUM4m4Cvr20GgchMB1cG6w7RwDagTL/zhEhP661l4pBFi7BENFh7EJ CuQy/hH63rRo0za42E2vfxdLednot8FPP+sQZw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	PKI.GOV is authoritative for PKI.GOV
	Found RRSIG signed by pki.gov zone
	Query to dns2.PKI.GOV for PKI.GOV/SOA
	Received 3749 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (3749 bytes) ;; HEADER SECTION ;; id = 34843 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN SOA ;; ANSWER SECTION (3 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20200605031119 20200529031119 45738 pki.gov. X5zEW1Xbt31aKd5iVHB94q5SovaQVcFA6x38FU2p3Uh+UncWA3Jje7f+7DmEb6pJFmV1XCUOAzNB wlZ2TVtDlEf+g2m0VADjckp5wiQJGFkcGp1xMHHT1QxrAyXp6k0hgJxapOmWRYLL94b82svpVP5f nP3JI8kIaffwo9FqfBoBpica01cOSCmp+RchYyW1ysYvWVysFntJ/LdTDxwogj4ogEj1oXL9E+v3 0lbpVmCbjrw0D8xg5hLThA+NZ4qxqn2//l+4h+0ZzS37dOnwQVUJfFVVGjnnd5fLyiObiU8DaMHG 9pIoYzqoMk44sjuGcUNqLfbgm6vfuLBwh7285g== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20200601092454 20200525092454 44358 pki.gov. mQGQB2M9jGy04O+Vqi80VphDqP8RVIqcy/HueTT6vR2uOvZwg9BNTw5ZNFu9tMWPcaDYi0xDFJlQ alVM/FlRYg8A+5n2GTDtXKvyVAC31DwzyMI0thNdgDEqdVM7nrr1WscS2pbCTJZR1snvHFh9sGvs aeERAfgStdZMbiJX0KrIAiTfFiNjDxwBdrvXhm+SLGomEKmA4hy0u9Fi9YWN75Ofod/zuidgvJTG 19VT+1nZoy7c6jc0b5FIM5NEv0SemZJjx90c8f11HMuIqRYPBcb40x2uekgY93UV6xZQiW2d6y2o eM9ed4D+b1Ci6hJFLeIwt+CWaJp5F8NMt+0n9A== ) ;; AUTHORITY SECTION (4 records) PKI.GOV. 500 IN NS dns1.PKI.GOV. PKI.GOV. 500 IN NS dns2.PKI.GOV. PKI.GOV. 500 IN RRSIG ( NS 8 2 500 20200531165938 20200524165938 45738 pki.gov. fxSRNkNqzhgiFpoky+9hgDw4MlY9ZImZVCY5csb6Bv0/HvrHKgM4xo4yB//ZYp+00v6B6N2Hd7M1 RKRlJE8gObf2zkrA0mXzz2NZ/6GElCVPSHEIRV87GKIFCAh43pFSbGvuvElwOv9J3soMZWGr8Iov Iy2e0cPkljaaMbE/dIKMcj+qbv7mWzMqUaV2soL6ymR+P2QzFKcieXh5wDpkosnkJdIu9qt4yMxs W37q4Jz6IoRSmDee+59YhNSutHCQ8+phY3BpaeIAcQjS8BrFUbMxfE42zvuZG3fc04ERzwilO/p5 efumAGNzRY2uwODQoGELGZXE9WD4AoHOAoUEaA== ) PKI.GOV. 500 IN RRSIG ( NS 8 2 500 20200601110756 20200525110756 44358 pki.gov. wgwRysL7bwjlIQen/KaoKKK0ow+SeT9t6qUUwz0xWFUDCkaeJ7XzOPURArXaMmDFnlGgRpTHIQRe nRqDj/hJw6lvZ6cOzONUmcFv9R6114pINM+/qknC8oMgL6Q9dq8P3CCqoEjKUJb05BXoQp2uwBMZ VAEje/84hahqiKreCg+C6o3cbCfWT+mG9ExQeKxZtIVwrUjW/F7o7slLiHQFozgbZ7INtmSsNE8G C8R4zTlqC1375R28D3MIF9VPmK3wYwnEICmXJNd9X76zvkhf3Q6mGKaKigcpNKp27/e7N4DcA21T FJuZpu1PnHfFc1HtAll2zBs0aiSI5gu6GHx8eA== ) ;; ADDITIONAL SECTION (13 records) dns1.PKI.GOV. 500 IN A 199.167.92.100 dns1.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20200531165938 20200524165938 45738 pki.gov. DSjrW1hVV/LjkwFM2xtz+jBkGSaA76tnl2hiNaxYGBmo84Abc5zSjH0ymoO8xFBY88MiT7xjrqlm CKLZaeOZUIILRQ9lHpqo20Ubuk1KTz7nYuIzSpCQRusTF2GNMiDOEqCVJtBDRTbFSQYsv5Nlc49s 57mTJApAuQI5+TFbG2tiJnID+SX9FKDcmb7jmllzfrQ5gf0XryhG2bfpLmz7F4oBp8PdgZAAMSjf XKKjo3Ls1Tnh3WlS0jDnzazW0oBAQRemfYV0xsgKQtlvHqS1gWjQqRm1qc9SyPXKkerDDHgnrO9n X0V5fQiacYPV7SVPWmpIW8a1+9Awo2jUXXxo2Q== ) dns1.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20200601110756 20200525110756 44358 pki.gov. sR7onmPsOAy62OV05RXBpVZ2yFTo9Dqe27IQIbTdIHqD2QWoT/xy5oD2RZC38/nQan9s0nyLcFON xI8K3/lor2pw32c34QvFNlrifpsTDkxN+KguWDXxxCZN+ZQtn0HggTK+0NXCIW8AlpJ3rZhvlyub wk57g2pFTfGJiiap42THnQHa3ouXjF6iTR3DE+ODLnIEerOKDyEhNvQL9f4oRphniA0sQ8/rWoiQ +VdssTXc2ijFSZm7FIwIGXGVcNecYWdSRUCEl1txF4yLo1TdfXz2hNPdmw9/qLoUP6OUe3kCcj0s sbUmuPHiPFPthKpW5RwUAXTdwJgYHoSEy9Qpyw== ) dns2.PKI.GOV. 500 IN A 199.167.93.100 dns2.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20200531165938 20200524165938 45738 pki.gov. C0hG6Y/z5dfmdFYdd5zXp61pxOoY8eA9YRUCc8PJPsncNYuRyMm6MdKj0SrqmMymXyrT4Kn3cPws zJzQvd0Z5u5YacpuLlwAi3hl0XRtD79wOo9y/JnhMBHH1jyfq+bh/+o/xRY3H7Lg4n/+EnOGXchr TrsfQlzNbdSbOlc88/CLVBbcCTTEsCa5otOC27LcFnu46F9XBQ+2PbB7fW8HLb9M9loaDzEZKPWQ KGD9bFqQFprgesjeWkcbesg+J6PBihWZ1PlLf28Vz+zxNBK0znbPYXpcfX2qbzm3NQtidqDqK8oC J1NtAfTUyHIamcCMnO9gUv2iZ0P+1Z6O0Y85Sw== ) dns2.PKI.GOV. 500 IN RRSIG ( A 8 3 500 20200601110756 20200525110756 44358 pki.gov. MpRtTxU5I1exM6uKbwwi5yB3A0fYTiHGdVU3TOoRMzSmRhwAaFOn+XOot7S++O+aFyGF0Arj5EKk OIKuYt0QdRBjBAUnGBeFW9nLshM0+zUMLo/NPu83oVnrkBTWs9a0IUy9FdbmPGOnRZ89eoQhVnWW yyI9mxC77QA5pQiZkN2Nut/OkfZcPlGudoram0j6gro7qM5iB0kB76PJyIDGc72TUTsYYyPw6eFI sx92/aIDSE6ytKN2MEZ5MF2/0vLS91M1imehWsPvG4DV3Bb1+YHoOxQUPgGlAIyho4tmo5vQv6vU nXeyQisAQWArc45sTo6XWZjEU0tuJFyn3iI9UQ== ) dns1.PKI.GOV. 500 IN AAAA 2620:9b:c000:9200:12::30 dns1.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200531165938 20200524165938 45738 pki.gov. J5aaDmNQkGtgGoQVO7bIPAsi2lhM/1YgLxjfAF3MR1mbk8yDuUpjoYFWV2OrPKSvy5bdrmEsUH3U 2f8NcsGJ4mWSwFuLdR+WSSCS/Zsel8BJKDtc6bQuTpXQQIP+6mLrheiepxRFJydEoQZ6wXdlEK3s Te6CRUvbG7GNC2d09xj1whceSp7JnRAimiYlD09E0WIKeDYj8NheNgZuEba0jvnkEhkHhsHXPGZ9 2jk2bl0W46+UXfiK6UJ5wZyxKTQH4wItazUJoVbrGTkFHH9PNhqHxqoHf+ZJYtTFvO+oBuYZ4lDL hqS2cOX5ck9w4k9cZbPbWqeyzhiJS3MesVecJA== ) dns1.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200601110756 20200525110756 44358 pki.gov. q9p7JWUGBqWzeJQLk4qHqZ+QKLg1y2Dqp8O3u55oYKriAa1dTim9CvJjx8GK1BeYe1nk+zftzoZk r9KQB6nMng98sN8TDmMUl9qbbnTVOCZ+peuboZCzZY5WacybZ6DUZBvmJ8tiyy0Seolpl200s4o1 IGvxESXUDpmG8b+FZWIzJN5iXWpp5MZGlayCqbekhLMxo+Wejr+Y1EeXyqVT0929mxN/q/t0jV5u cr7LDK5+K2N1N+O+Eg3sT8Yg5kK+6R5GeDuQ99ht0xmyNSZS8ZzkZntB09F6kt8XJaEcF1Zst6AS UjfWefO1Z8rCpXY8wvaBUSrrUYfYA4M4CddXZA== ) dns2.PKI.GOV. 500 IN AAAA 2620:9b:c001:9300:22::30 dns2.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200531165938 20200524165938 45738 pki.gov. N8kr4bTqfoQFv8il7/+FwQcu+TrgcYhIfEc90cGqeEd4aVBYqetBl3+Jfq333x5lxjhoiYczGTV6 RqMxDvUGEQHJGqvg8uVwe65DEqlX7ne5FcQGq9pwXgg/v+3pCkCJqaqWmJiLHvf6j4rtsBVm5orU HmhIokc6Oms+3X8wtLFJjfaX/QrQzz0EfehCJ/Gb6XoJbY/HNFgd6AYnwFVVIYfjePTsq4eLWkGM 2vvh+8K9hQmSGjaKdOcXEJ7TrTiyxzyurKIYU6P22jGiFjhzLZGmlvUtDOvvVoolxHASGg06TYc5 3CYk0GF2vWAPqdR3rc1HUh1n9vQmMcazdCr6sw== ) dns2.PKI.GOV. 500 IN RRSIG ( AAAA 8 3 500 20200601110756 20200525110756 44358 pki.gov. likNhYXnXqwHXbHzKLnEtTitbLxgZifnUr5lD5S1uqgGpYhlpZ0mHWK6iIttSruW4hfiDGi9uIRe I7Q7evOammRZ9YW7eRAS/TdvncYB2d+RcI52CY4IQ2Ln9hhD3vXX76iHg3sKmehIAqidr7hI6VUa kP7S1gO17iU0sBfh9o6UsOm8NmiSF8w41YjJQyBZG7qwnVRl9mCspFDkYt2iUUXZO3VWcsSMinJk gTR5EqS66YOll+qSJdWErdJeRkgR00ACvCXr0Z6nTrA6372Ea4PYY+KB7m6TKJ3G/lJrSB323EZv 3t604O6mbONFH+sJNGBMfeOhna3hacRyYvZAxw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.PKI.GOV for PKI.GOV/A
	Received 1356 bytes from 199.167.93.100
	;; Answer received from 199.167.93.100 (1356 bytes) ;; HEADER SECTION ;; id = 37416 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; PKI.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PKI.GOV. 500 IN SOA ( dns1.PKI.GOV. hostmaster.dns1.PKI.GOV. 2018121102 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20200605031119 20200529031119 45738 pki.gov. X5zEW1Xbt31aKd5iVHB94q5SovaQVcFA6x38FU2p3Uh+UncWA3Jje7f+7DmEb6pJFmV1XCUOAzNB wlZ2TVtDlEf+g2m0VADjckp5wiQJGFkcGp1xMHHT1QxrAyXp6k0hgJxapOmWRYLL94b82svpVP5f nP3JI8kIaffwo9FqfBoBpica01cOSCmp+RchYyW1ysYvWVysFntJ/LdTDxwogj4ogEj1oXL9E+v3 0lbpVmCbjrw0D8xg5hLThA+NZ4qxqn2//l+4h+0ZzS37dOnwQVUJfFVVGjnnd5fLyiObiU8DaMHG 9pIoYzqoMk44sjuGcUNqLfbgm6vfuLBwh7285g== ) PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20200601095235 20200525095235 44358 pki.gov. npegwFGYPS2urmoHeokbzmaS7rwUQEK9ipTl3UvCobt5HWanUxYui/6yr8Q+ERPyNJwzHs24Y5lu jHpoIZX1pgio6GV422xGnGSPKa+NIffJF1bsHgbZJ0SXkLZbJiwHFLZtL9Sio37gy+rIQmmZ8C0S XNKzTZxINv3wFdz3k7hDpAAwgfI58g9Y7pvcI+Nw0u8ZGXCrVYdCXQR0i+UJlNX6VCgPU8Ob0E4J gTdrtG50SI0dgaP3ardIiEK+CK6u6c0q0z8qnYQeuEaATmvcGr+PAOVg2YTm99sHTRBBKwE9sej1 9rFAHiN6qNJjQGR1eeTpM6ji9/Y7Nc94o2tk7g== ) qlh7b66fb4500hsmm6ljqgnbf907tvji.PKI.GOV. 86400 IN NSEC3 ( 1 0 1 5a5034472901fd70 qlh7b66fb4500hsmm6ljqgnbf907tvjj NS SOA RRSIG DNSKEY NSEC3PARAM ) qlh7b66fb4500hsmm6ljqgnbf907tvji.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20200605031119 20200529031119 45738 pki.gov. RucnKSBX+MZzEmZO0GbUIo4/9LKk2atGR+KuoJK12Mcrc6gieCWacdypbQT3Qo9a8AK996ck17YR mPVuoiF9TsglKo4v/Mg33gUWTz/EJDAlxsbqtIF2oAXxNBPoWhcNVFDcbf65dx88tURGKJgeO3FC QQqd6NoBJ4oFhbL1n5DYJChHnuyrTQvdOVHQbmVU3s2u9ZJSvatYFmOMP712+auJYMQa7at51PHL +OAPIokWW2cdWWBZYgtmfNu4cWo1iUaVmT5uidGcxF7FV1kPWdW2Ff41VOiOnXa5VbGaBZtPqIRx Xl689hLmaH4XT9SBQKSaLno5P8GTM+q5XIK7qA== ) qlh7b66fb4500hsmm6ljqgnbf907tvji.PKI.GOV. 86400 IN RRSIG ( NSEC3 8 3 86400 20200601095235 20200525095235 44358 pki.gov. bEApy/Xxo19KxlXGKTFOyCF5587Kcpq1AXzsHoKTsl1b1J7hRXcZQU93h7yeXq3t2fEIDTtLYzRC tJyAQ43wKXaHJo6zXbPZyvSqUjaQnNibsVwd/hC7FfFyWjGRNjBxK2yMbLDvUzXaWVOG0aUrl/Vr /H8kaL9cQ5GUn2SFTd+Fo72YZcAekUosuuRUHlD8Pd4loONbC3nMnDv0qhcikZU0utvpmMbW9bam 4J0wvzjzbhZzZvNV81Tz2JjSRL4N/EDwxvky2sou49mE7uTXEjMQNcYOyDnrsn2Y3/iS/OFdm9G0 F4OYnvJ1iCHW9XUvGWcYDu5ku/WJfKs7FEbbWg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20200605031119 20200529031119 45738 pki.gov. X5zEW1Xbt31aKd5iVHB94q5SovaQVcFA6x38FU2p3Uh+UncWA3Jje7f+7DmEb6pJFmV1XCUOAzNB wlZ2TVtDlEf+g2m0VADjckp5wiQJGFkcGp1xMHHT1QxrAyXp6k0hgJxapOmWRYLL94b82svpVP5f nP3JI8kIaffwo9FqfBoBpica01cOSCmp+RchYyW1ysYvWVysFntJ/LdTDxwogj4ogEj1oXL9E+v3 0lbpVmCbjrw0D8xg5hLThA+NZ4qxqn2//l+4h+0ZzS37dOnwQVUJfFVVGjnnd5fLyiObiU8DaMHG 9pIoYzqoMk44sjuGcUNqLfbgm6vfuLBwh7285g== )`
	`PKI.GOV. 500 IN RRSIG ( SOA 8 2 500 20200601092454 20200525092454 44358 pki.gov. mQGQB2M9jGy04O+Vqi80VphDqP8RVIqcy/HueTT6vR2uOvZwg9BNTw5ZNFu9tMWPcaDYi0xDFJlQ alVM/FlRYg8A+5n2GTDtXKvyVAC31DwzyMI0thNdgDEqdVM7nrr1WscS2pbCTJZR1snvHFh9sGvs aeERAfgStdZMbiJX0KrIAiTfFiNjDxwBdrvXhm+SLGomEKmA4hy0u9Fi9YWN75Ofod/zuidgvJTG 19VT+1nZoy7c6jc0b5FIM5NEv0SemZJjx90c8f11HMuIqRYPBcb40x2uekgY93UV6xZQiW2d6y2o eM9ed4D+b1Ci6hJFLeIwt+CWaJp5F8NMt+0n9A== )`
	RRSIG=45738 and DNSKEY=45738 verifies the SOA RRset
	RRSIG=44358 and DNSKEY=44358 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test PKI.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: